Governance, Risk, and Compliance Lead

Quantum Sky•Washington, DC

2d•$165,000 - $185,000•Onsite

About The Position

Quantum Sky is seeking a Governance, Risk, and Compliance Lead to support a federal customer in Washington, DC. The role provides expert cybersecurity and information assurance leadership, including counsel to senior security executives, representation in departmental working groups, and oversight of compliance operations, risk assessments, security authorizations, and High-Value Asset (HVA) security programs. The position also supports technical reviews, procurement and system development security requirements, network guidance, capacity planning, and remediation efforts in sensitive and highly classified environments.

Requirements

Bachelor’s degree or an equivalent combination of formal education and experience; a bachelor’s degree may be substituted with four additional years of relevant experience.
At least 8 years of general experience and 6 years of relevant experience in the functional responsibility.
Knowledge of cybersecurity threats and information system technologies, and experience with online research techniques.
Experience in risk management and working with the Systems Development Life Cycle (SDLC), including performing security tasks throughout it.
Experience and working understanding of FISMA compliance; experience conducting all phases of Certification and Accreditation and creating documentation in accordance with NIST guidance.
Knowledge of NIST publications, including the NIST 800 series; OMB circulars such as OMB A-123 and OMB A-130, and related memoranda; and CNSS publications, including CNSS 1253, their requirements, and their impact on system security and risk management methodologies.
Strong analytical and organizational skills.
Concise writing skills.
CISSP certification required.
Active Top Secret clearance required.

Nice To Haves

Understanding of and experience with CSAM.

Responsibilities

Serve as the lead for the Program Cyber Liaisons.
Advise the CISO and Deputy CISO on information assurance, compliance frameworks, and cybersecurity strategy.
Represent the Department in working groups and cybersecurity committees addressing challenges such as maturing the CDM program, automating the ATO process, and developing and implementing enterprise security services.
Lead development of the Department’s program for identifying, protecting, and monitoring High-Value Assets (HVAs).
Oversee day-to-day information system compliance operations, manage risk escalation paths, and mentor assessment teams by providing advanced assistance.
Lead complex risk assessments and security audits across sensitive operational environments and establish systematic vulnerability remediation frameworks.
Lead security authorizations (A&A), analyses, and compliance evaluations in highly classified and sensitive environments.
Develop requirements and specifications for security-based review and approval of procurement requests, major systems development activities, telecommunications hardware and software, and hardware and software encryption techniques.
Assess technology broadly to identify and remediate security vulnerabilities.
Drive capacity planning and system optimization reviews to align resource utilization and network performance with a hardened, compliant security posture.
Provide Automated Indicator Sharing (AIS) and client network guidance, training, research, and recommendations.
Support technical reviews for non-standard operational requirements and systems, including designing, developing, and maintaining unique security assessment tools and conducting assessments.